Denial Of Service (DoS)

ntp is vulnerable to denial of service. An incomplete fix for CVE-2014-9750 resulted in improper value length checks in ntpcrypto.c. A packet with particular autokey operations that contained malicious data was not always being completely validated. A remote attacker could use a specially crafted...

SUSE SLES10 Security Update : xntp (SUSE-SU-2015:0322-1)

xntp has been updated to fix two security issues : - CVE-2014-9298: ::1 can be spoofed on some OSes, so ACLs based on IPv6 ::1 addresses can be bypassed bnc911792. - CVE-2014-9297: vallen is not validated in several places in ntpcrypto.c, leading to potential info leak bnc911792. Note that Tenabl...

NTP 'ntp_crypto.c' Information Disclosure Vulnerability

NTP is a protocol used to synchronize computer time. NTP 'ntpcrypto.c' has an information disclosure vulnerability that can be exploited by an attacker to obtain sensitive information...